Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File:                     P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier:          VS/6DKim3mBrPAKo861ufnShg4/6PETjWNUPGJpwXV0=
Subject key identifier:   C1:25:65:94:CF:35:88:D5:8F:F0:64:DF:00:0D:F1:E6:9F:B5:EF:34
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       02FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number:          02EB
Signing time:             Mon 11 Aug 2025 01:33:08 +0000
Manifest this update:     Mon 11 Aug 2025 01:33:07 +0000
Manifest next update:     Mon 18 Aug 2025 01:33:07 +0000
Files and hashes:         1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: Vb8/0aBR4N9JeqyBD2lKIUL88VZAhImGBLRDCbf8GwA=)
                          2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: cwVG6skd3N1RIYsEuEG8iHXyP7x6WSmLSEaSXVtQaYU=)
                          3: 38813674CA6811EE9891A565C4F9AE02.roa (hash: /I66GwSb6b8OKFWqoS4US5PTjIDfLyd4Pk4hVzRDLQU=)
                          4: 6A347A8E6E0711F0B4073D1DC4F9AE02.roa (hash: WLJSC8F2beVFwk5wQF2XhiW8o1W05YWVEl7Z6TS1RpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Aug 11 01:33:07 2025 GMT
            Not After : Aug 18 01:33:07 2025 GMT
        Subject: CN=68994854-eeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:c8:34:e5:68:f1:4b:0f:47:c9:96:ae:fc:
                    7e:57:40:50:90:6e:2a:5e:63:17:38:34:95:a0:d9:
                    9b:15:a2:6a:f0:62:0e:2f:21:7a:ae:c3:1b:89:22:
                    95:0f:b1:70:55:9f:72:98:2a:2f:0f:49:87:59:ba:
                    3a:1f:9c:7d:03:c0:e5:de:91:03:e8:85:bd:92:56:
                    61:bd:af:7b:be:36:db:41:ab:49:ea:d0:e7:4d:9b:
                    b6:e1:ee:d5:c4:0b:c4:07:e9:77:d5:9f:45:e7:b7:
                    98:2f:3f:47:6c:96:33:a8:3c:d8:78:78:3c:22:ff:
                    8b:69:c6:3c:6e:b6:b6:5c:dc:04:7f:59:25:7b:b2:
                    10:71:e5:73:36:89:10:b5:d8:f7:b9:eb:ec:db:72:
                    1e:10:f7:ff:c4:be:78:12:36:bf:15:a6:3f:3f:3d:
                    f6:cc:71:62:24:2b:b8:4a:3f:7a:87:bf:a8:42:90:
                    26:1e:5a:dc:78:5f:1e:1d:c6:be:40:4c:b4:13:c6:
                    05:6a:0e:c5:f7:57:8f:7a:86:92:df:3d:65:44:fa:
                    59:78:28:82:dc:b5:e5:87:db:7e:21:98:2e:d5:3f:
                    f4:98:e9:17:1b:cb:33:a2:cf:d3:fc:a6:8c:a9:c4:
                    4c:c6:9e:1e:e8:ab:54:0e:fa:fa:c1:0e:9b:08:88:
                    b6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:65:94:CF:35:88:D5:8F:F0:64:DF:00:0D:F1:E6:9F:B5:EF:34
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:ce:3f:d4:69:8a:42:77:8e:0d:a3:08:f7:07:ec:66:52:
         f6:f3:bf:e7:8f:35:c1:9e:56:6f:e5:a3:06:d9:ae:c6:99:ce:
         89:23:f2:45:a3:03:b9:14:fd:df:72:99:dd:d2:d1:9c:9c:ae:
         51:96:de:0f:f4:40:e0:47:8c:b1:26:4c:96:fd:46:25:3d:f8:
         2e:55:b5:af:b6:78:56:d1:7d:0a:d5:55:12:03:57:20:c9:64:
         b3:fe:19:04:50:f7:83:1b:9b:15:25:53:9e:8a:f4:0f:bc:7d:
         c4:16:dc:9c:6d:12:3c:c1:45:69:53:42:ed:49:57:cc:6b:f5:
         c2:05:d5:bc:e4:5b:58:7c:c3:f9:ae:ea:05:b0:8e:87:94:f6:
         62:d5:b6:ef:2a:60:3f:87:2d:e6:2c:6a:07:d3:36:cd:f1:06:
         99:cf:45:c3:9a:36:17:8e:69:8e:31:16:5c:6d:66:07:b1:db:
         f6:eb:a9:97:dc:91:c9:bf:bd:45:7e:f3:7f:48:6c:d2:f0:75:
         76:f5:df:0d:dc:8c:fd:a6:9b:31:d9:c6:4c:5a:c1:05:d1:e8:
         1e:69:82:b7:af:b3:2b:ff:8b:0e:45:b1:de:ef:41:42:4c:02:
         0c:ec:ad:6b:01:61:5f:bd:9a:6f:cd:f2:66:41:6d:83:52:90:
         23:dc:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:35:53 2025 by rpki-client